1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive Browser Hijack/Unable to Use SKYPE other functions

Discussion in 'Malware and Virus Removal Archive' started by hlbull, 2011/07/20.

Page 4 of 6
  1. 2011/07/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Finish Eset scan first.

    Then restart computer and pay attention to the bottom of the screen.
    You should see something like this:
    Press <some key> to enter setup
    Press indicated key to access BIOS.
    Poke around and see if you'll find some info.
     
    broni,
    #61
  2. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    OK.

    If the Eset progress bar elapsed time is proportional to the amount of scan time remaining, we have maybe an hour to go on the Eset scan.

    Do you have any ideas what might be happening yet, given the symptoms I've told you and the scans we have run? Is it OK to work an indefinite amount of days in safe mode with networking?

    Thanks so much, Broni!
     
    hlbull,
    #62


  3. to hide this advert.

  4. 2011/07/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    As long as you're behind a router you should be fine.

    I'm really not sure what your issue is.

    Judging from all scans we performed so far I really doubt we're dealing with an infection anymore.

    Seeing service pack being gone, for instance, I'm leaning toward some Window corruption issue.
     
    broni,
    #63
  5. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    Router is about 15 ft from me behind closed door. It that OK?

    After running TDSKiller on Wednesday eve, the system blue screened and hasn't been able to run in normal mode. Did TDSKiller delete any infections? Could the infection be gone, but its aftermath a corrupt Vista system. Is there any way to download a reinstall DVD from the Internet, and can I reinstall Vista?
     
    hlbull,
    #64
  6. 2011/07/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Distance doesn't matter, but you're connected to the net through a router right?

    TDSSKiller fixed a rootkit, but we may want to double check.

    When done with Eset....

    Download the FixTDSS.exe

    Save the file to your Windows desktop.
    Close all running programs.
    If you are running Windows XP, turn off System Restore. How to turn off or turn on Windows XP System Restore
    Double-click the FixTDSS.exe file to start the removal tool.
    Click Start to begin the process, and then allow the tool to run.
    Restart the computer when prompted by the tool.
    After the computer has started, the tool will inform you of the state of infection (make sure to let me know what it said)
    If you are running Windows XP, re-enable System Restore.
     
    broni,
    #65
  7. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    Yes, connected to wireless through the router.

    Looks like the download for FixTDSS.exe failed twice on Wednesday night. Since then, I've figured out that I sometimes need to right click, sometimes need to left click, but eventually I'll get the ap to download.

    Eset scan has found no threats but may be at it for quite a while, I am afraid. Have to leave early tomorrow morn, so may only be able to finish it and run FixTDSS tonight. Back 7/31.

    Should I be asking around for a Vista DVD?

    Thanks so much for all the help!
     
    hlbull,
    #66
  8. 2011/07/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    broni,
    #67
  9. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    ESET finished. No found threats. So pushing a List of found threats does not apply?

    Should I exit?
     
    hlbull,
    #68
  10. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    I don't see fixtdss, Broni. I do see the TDSKiller download, however. Should I re-download?
     
    hlbull,
    #69
  11. 2011/07/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    broni,
    #70
  12. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    How will FixTDSS inform me of state of infection after the restart? Will there be a file somewhere?
     
    hlbull,
    #71
  13. 2011/07/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    At the end of the scan it should tell you if anything has been fixed.

    Save the file to your Windows desktop.
    Close all running programs.
    If you are running Windows XP, turn off System Restore. How to turn off or turn on Windows XP System Restore
    Double-click the FixTDSS.exe file to start the removal tool.
    Click Start to begin the process, and then allow the tool to run.
    Restart the computer when prompted by the tool.
    After the computer has started, the tool will inform you of the state of infection.
    If you are running Windows XP, re-enable System Restore.
     
    broni,
    #72
  14. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    Well, it didn't tell me anything. Just gave me notice that it would restart the system and something would display, which didn't should I try again?
     
    hlbull,
    #73
  15. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    Is there any way to get normal mode back without clearing the disk and starting all over again?

    Thanks so much!
     
    hlbull,
    #74
  16. 2011/07/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Go ahead.
     
    broni,
    #75
  17. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    OK, rerunning.
     
    hlbull,
    #76
  18. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    Tool doesn't open up after restart, probably because it crashes in normal mode and goes into safe mode.

    What are the next steps, Broni?
    Thanks so much!
     
    hlbull,
    #77
  19. 2011/07/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    broni,
    #78
  20. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    How can I get audio and printing to work in safe mode, Broni? I may be using safe mode for a while.

    Is it OK to turn back on my real-time protection? Can I download drivers for my printer to safe mode now so that I can print?

    Thanks again.
    Hannah
     
    hlbull,
    #79
  21. 2011/07/22
    hlbull

    hlbull Inactive Thread Starter

    Joined:
    2011/07/20
    Messages:
    62
    Likes Received:
    0
    Is this a different version, or can I run the TDSKiller exec on my system now? What is the _1 for ?
     
    hlbull,
    #80
Page 4 of 6

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...